Privacy Policy

1. Data We Collect

• Account information: name, email address, phone number
• Authentication provider data provided by Google or Microsoft when you sign in via SSO
• Usage data: pages visited, features accessed, session duration, and interaction logs
• Subscription and billing information processed by third-party payment providers

2. How We Use Your Data

We use collected data to provide and operate the Anvesti service, send account notifications and stock alerts, improve platform performance, and comply with legal obligations.

3. Data Sharing

We do not sell your personal data. We may share data with trusted service providers (including Firebase and payment processors) strictly to operate the service. These providers are contractually bound to protect your data.

4. Data Retention

Account data is retained while your account is active. Upon account deletion, personal data is removed within 90 days, except where retention is required by applicable law.

5. Data Breach Notification

In the event of a data breach that affects your personal information, Anvesti will notify affected users within 72 hours of becoming aware of the breach, as required by applicable law. Notifications will be sent to the email address associated with your account.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, and to withdraw consent for certain processing. To exercise these rights, contact us at support@anvesti.com.

• California residents (CCPA): You have the right to know what personal data is collected, to request deletion, to opt out of any sale of personal data (Anvesti does not sell personal data), and to non-discrimination for exercising these rights.
• EU/EEA residents (GDPR): You have the right to access, rectify, erase, restrict processing, data portability, and to object to processing. You may also lodge a complaint with your local supervisory authority.

7. Cookies and Tracking

Anvesti may use essential cookies to maintain session state and authentication. No third-party advertising or tracking cookies are used without your explicit consent.

8. Third-Party Service Providers

Anvesti uses the following third-party service providers who may process your data: Firebase (Google) for authentication and database services - see Firebase Privacy; and Stripe for payment processing - see Stripe Privacy Policy. These providers are contractually bound to protect your data and may not use it for their own purposes.

9. Changes to This Policy

Anvesti reserves the right to update this Privacy Policy. Material changes will require re-acceptance before continued account access is granted.